{
  "cveId": "CVE-2023-52797",
  "url": "https://patchblox.com/security/cve/CVE-2023-52797",
  "summary": "CVE-2023-52797 is fixed in linux on 1 platform, first by DEBIAN-CVE-2023-52797, released May 21, 2024. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  drivers: perf: Check find_first_bit() return val...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  drivers: perf: Check find_first_bit() return value  We must check the return value of find_first_bit() before using the return value as an index array since it happens to overflow the array and then panic:  [  107.318430] Kernel BUG [#1] [  107.319434] CPU: 3 PID: 1238 Comm: kill Tainted: G            E      6.6.0-rc6ubuntu-defconfig #2 [  107.319465] Hardware name: riscv-virtio,qemu (DT) [  107.319551] epc : pmu_sbi_ovf_handler\u002B0x3a4/0x3ae [  107.319840]  ra : pmu_sbi_ovf_handler\u002B0x52/0x3ae [  107.319868] epc : ffffffff80a0a77c ra : ffffffff80a0a42a sp : ffffaf83fecda350 [  107.319884]  gp : ffffffff823961a8 tp : ffffaf8083db1dc0 t0 : ffffaf83fecda480 [  107.319899]  t1 : ffffffff80cafe62 t2 : 000000000000ff00 s0 : ffffaf83fecda520 [  107.319921]  s1 : ffffaf83fecda380 a0 : 00000018fca29df0 a1 : ffffffffffffffff [  107.319936]  a2 : 0000000001073734 a3 : 0000000000000004 a4 : 0000000000000000 [  107.319951]  a5 : 0000000000000040 a6 : 000000001d1c8774 a7 : 0000000000504d55 [  107.319965]  s2 : ffffffff82451f10 s3 : ffffffff82724e70 s4 : 000000000000003f [  107.319980]  s5 : 0000000000000011 s6 : ffffaf8083db27c0 s7 : 0000000000000000 [  107.319995]  s8 : 0000000000000001 s9 : 00007fffb45d6558 s10: 00007fffb45d81a0 [  107.320009]  s11: ffffaf7ffff60000 t3 : 0000000000000004 t4 : 0000000000000000 [  107.320023]  t5 : ffffaf7f80000000 t6 : ffffaf8000000000 [  107.320037] status: 0000000200000100 badaddr: 0000000000000000 cause: 0000000000000003 [  107.320081] [\u003Cffffffff80a0a77c\u003E] pmu_sbi_ovf_handler\u002B0x3a4/0x3ae [  107.320112] [\u003Cffffffff800b42d0\u003E] handle_percpu_devid_irq\u002B0x9e/0x1a0 [  107.320131] [\u003Cffffffff800ad92c\u003E] generic_handle_domain_irq\u002B0x28/0x36 [  107.320148] [\u003Cffffffff8065f9f8\u003E] riscv_intc_irq\u002B0x36/0x4e [  107.320166] [\u003Cffffffff80caf4a0\u003E] handle_riscv_irq\u002B0x54/0x86 [  107.320189] [\u003Cffffffff80cb0036\u003E] do_irq\u002B0x64/0x96 [  107.320271] Code: 85a6 855e b097 ff7f 80e7 9220 b709 9002 4501 bbd9 (9002) 6097 [  107.320585] ---[ end trace 0000000000000000 ]--- [  107.320704] Kernel panic - not syncing: Fatal exception in interrupt [  107.320775] SMP: stopping secondary CPUs [  107.321219] Kernel Offset: 0x0 from 0xffffffff80000000 [  107.333051] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]---",
  "published": "2024-05-21T16:15:18Z",
  "severity": "medium",
  "cvss": 5.5,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.0028,
  "epssPercentile": 0.20626,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.5.13-1",
      "fix": "DEBIAN-CVE-2023-52797",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-52797",
      "released": "2024-05-21T16:15:18Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.5.13-1",
      "fix": "DEBIAN-CVE-2023-52797",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-52797",
      "released": "2024-05-21T16:15:18Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T07:25:28Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}